This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=
Subject key identifier:   88:09:F9:C3:34:B4:32:D1:C3:9B:1C:48:A8:1E:DC:2B:F5:17:92:77
Certificate issuer:       /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Certificate serial:       3F3B7469AA55D1F6C7582569A25528946B448F6D
Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 06:02:26 +0000
ROA not before:           Wed 05 Nov 2025 05:57:26 +0000
ROA not after:            Wed 04 Nov 2026 06:02:26 +0000
asID:                     135478
IP address blocks:        103.121.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
                          rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 22:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:74:69:aa:55:d1:f6:c7:58:25:69:a2:55:28:94:6b:44:8f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
        Validity
            Not Before: Nov  5 05:57:26 2025 GMT
            Not After : Nov  4 06:02:26 2026 GMT
        Subject: CN=8809F9C334B432D1C39B1C48A81EDC2BF5179277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:34:73:e0:62:41:1e:01:d6:ad:4b:4f:ab:
                    4d:0c:07:b4:65:20:15:c2:6f:23:87:99:eb:58:2b:
                    92:e5:38:4f:5b:3e:94:41:58:dd:dd:d5:1f:fa:08:
                    1a:01:06:1a:7f:0a:c0:3e:75:bb:54:2c:35:93:11:
                    ef:9c:9b:f4:7f:f0:d2:13:aa:1a:ed:bd:f4:68:13:
                    d6:50:12:c9:7a:69:80:79:d1:45:c8:df:d1:9c:10:
                    50:29:32:c3:3a:1b:20:ea:bf:19:a6:bc:c3:a5:ee:
                    8c:5e:83:86:5d:76:3f:a5:0f:d0:95:3c:58:14:3b:
                    9c:30:08:36:0d:99:34:d6:0d:55:0c:6b:aa:ba:78:
                    ac:dc:62:51:e3:2c:da:b8:c1:6f:9a:07:b7:15:94:
                    a1:13:02:dd:df:ff:6a:96:59:27:11:63:37:8e:83:
                    5f:bd:86:71:bb:d2:80:61:63:fd:bf:67:ae:fc:91:
                    e8:4c:cd:50:b2:1a:93:b8:0e:0a:eb:95:03:e8:ef:
                    d2:25:f3:e9:b1:46:2c:f1:20:4e:17:e2:35:ff:df:
                    6d:ef:50:fa:9e:35:a7:f7:8e:71:d2:33:ac:aa:c8:
                    49:d0:cc:e8:9b:ed:59:30:3b:36:da:97:0b:f4:80:
                    ad:dc:16:ab:f9:e6:1c:aa:be:74:e4:b9:62:23:98:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:F9:C3:34:B4:32:D1:C3:9B:1C:48:A8:1E:DC:2B:F5:17:92:77
            X509v3 Authority Key Identifier:
                keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:66:47:0b:9b:0f:23:47:1d:88:ee:fb:18:fb:c9:3f:bc:94:
         a6:81:82:69:d2:ea:1f:25:e0:00:5d:7a:62:90:1e:ff:11:8d:
         c0:cb:d9:44:cd:0b:a4:79:cf:b4:8e:e7:50:fa:51:dc:42:e1:
         33:4f:0a:89:26:6c:9a:70:e2:6d:d7:e6:30:8d:de:2f:a9:89:
         75:b9:96:f3:44:e9:b3:d8:cf:a3:d0:80:da:44:ed:22:be:9d:
         b6:e0:17:1c:93:17:fc:6e:58:ac:7d:59:43:04:cb:65:f9:1d:
         ee:79:ee:22:67:11:01:4e:10:1f:7e:2d:d0:4a:07:78:ed:95:
         f5:fc:62:1e:60:2d:1b:5d:dc:9f:38:92:61:1d:23:0c:78:79:
         61:12:8e:e4:b1:8a:b6:76:8f:5f:ac:33:bb:1f:9e:fc:64:12:
         e6:d2:d6:fa:7a:3d:a4:53:78:cc:9b:52:9e:6d:ca:78:63:d2:
         2f:f6:7d:9c:6c:20:a6:64:4c:9d:18:cc:7c:a7:ec:e8:3f:c6:
         b7:4d:9f:02:22:fa:39:23:03:69:d3:04:25:5c:b8:02:e2:e4:
         55:06:96:0d:f5:7e:49:73:fb:31:fc:27:2a:43:99:d2:e4:bd:
         f0:70:f2:56:ae:05:50:68:3f:20:b2:c7:1e:8d:45:e2:8b:55:
         0e:6c:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:56 2025 by rpki-client